Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.mft
File:                     405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.mft (raw, json)
Hash identifier:          9RiR6j71iNK6WeMI1kYrS55zkcvCgs5KZTWsyYC3mIQ=
Subject key identifier:   E3:6F:3C:36:65:C8:9B:89:38:AD:AE:70:47:F6:EF:D9:E2:51:3D:DE
Authority key identifier: 40:5C:E8:1A:8B:5F:58:A8:C8:6E:F0:96:E0:93:C3:F5:7F:F1:9B:EF
Certificate issuer:       /CN=405CE81A8B5F58A8C86EF096E093C3F57FF19BEF
Certificate serial:       46715BB7B1F262580C9E8002102616D311AD875B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.mft
Manifest number:          4F
Signing time:             Tue 05 Dec 2023 02:52:00 +0000
Manifest this update:     Tue 05 Dec 2023 02:47:00 +0000
Manifest next update:     Wed 06 Dec 2023 06:03:00 +0000
Files and hashes:         1: 3139312e3234322e3139382e302f32342d3234203d3e20323633313433.roa (hash: pRkoSuRaKYdDCvCy8nk2nl79nkjwz5RC6mJcrlNaAjI=)
                          2: 3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa (hash: MLaq1TSSss+KvnonWaOHyzxedO2FF0DiMtby/3OvFEQ=)
                          3: 3139312e3234322e3139362e302f32322d3232203d3e20323633313433.roa (hash: 9sOO9kkSC+HaN00aLuKvQsvAd0GQuw2rY9g/4ynGkug=)
                          4: 323830343a313736343a3a2f33322d3332203d3e20323633313433.roa (hash: 21h0nvTEZYgfZBN8jqaXSPdXiTyTUeO1l1zzFNaEqrc=)
                          5: 3139312e3234322e3139392e302f32342d3234203d3e20323633313433.roa (hash: 3JlkBcpTPWvnBQay6daCqicxmsAE+Xxm1SuHEmmt+W4=)
                          6: 405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.crl (hash: xbQ8bDo/FDFuCewG9upu5IoKziOzjRb67EGBwJoElRI=)
                          7: 3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (hash: q4EqwuJSDDg7atbTUZ/YtZI9aNDTjv4rS7NSncqASjY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:71:5b:b7:b1:f2:62:58:0c:9e:80:02:10:26:16:d3:11:ad:87:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405CE81A8B5F58A8C86EF096E093C3F57FF19BEF
        Validity
            Not Before: Dec  5 02:47:00 2023 GMT
            Not After : Dec  6 06:03:00 2023 GMT
        Subject: CN=E36F3C3665C89B8938ADAE7047F6EFD9E2513DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:68:86:25:63:f8:94:68:cd:c1:86:68:47:
                    5e:76:8a:7d:5b:04:a1:78:8a:64:45:40:c8:6a:a4:
                    cf:8a:96:ca:b3:63:90:15:11:3b:37:e1:d9:74:58:
                    23:16:58:7c:b2:dc:ce:b5:6c:c8:53:c2:87:ce:e5:
                    bb:88:18:21:eb:82:e4:ca:23:e3:9c:11:92:da:c2:
                    47:c9:4b:a5:fd:18:79:ed:91:d7:2c:ab:e3:95:81:
                    a5:c1:a2:e6:95:57:4a:d0:24:ce:a2:3e:9f:f2:7a:
                    1c:63:7c:ca:ce:9c:83:72:d9:92:23:76:d9:29:35:
                    c9:f4:c4:08:7f:f2:c7:fb:b2:ee:57:97:d6:6c:d2:
                    3c:13:1e:16:ad:8b:f5:81:d0:cc:a3:bb:0d:e8:68:
                    ea:35:ae:34:24:f3:12:88:36:2d:2f:74:24:b1:51:
                    a2:cf:4d:d3:c4:33:a3:84:b7:c8:a0:41:d6:e4:cf:
                    65:63:16:b6:98:55:4c:1d:9b:8d:a0:a4:5d:07:ee:
                    68:e1:e2:7f:b0:f2:99:6f:10:96:dd:59:20:ad:e3:
                    1c:a4:40:c8:4b:4a:7f:ca:e6:3e:ab:20:60:49:e6:
                    f5:06:c6:2a:9b:2f:93:a3:dd:cc:99:50:ef:1f:ac:
                    c5:34:8e:93:ec:bc:ff:53:d9:05:55:ba:12:bf:d2:
                    35:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6F:3C:36:65:C8:9B:89:38:AD:AE:70:47:F6:EF:D9:E2:51:3D:DE
            X509v3 Authority Key Identifier:
                keyid:40:5C:E8:1A:8B:5F:58:A8:C8:6E:F0:96:E0:93:C3:F5:7F:F1:9B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/0/405CE81A8B5F58A8C86EF096E093C3F57FF19BEF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:28:4f:94:ac:c2:2c:a9:98:cf:18:9c:fc:6e:cf:42:50:
         72:bf:b6:ed:2f:8b:d6:76:ee:d7:45:d0:0e:63:a4:b2:c3:fa:
         88:05:4e:d2:0f:a1:15:44:db:8f:31:28:b2:5a:67:4c:b7:7e:
         fb:46:87:fc:09:d4:37:90:03:42:ba:0f:9f:07:ed:ee:b6:1c:
         a3:9a:88:c2:96:e4:ed:71:a7:a0:4e:91:ef:33:ea:00:67:37:
         b2:c8:7d:0a:73:67:a5:11:16:b2:f7:f3:3c:b2:c0:29:97:c3:
         49:52:83:31:24:2b:2c:66:3e:0e:24:bf:90:ec:f9:02:f6:1d:
         46:b7:94:c5:e1:57:fd:b6:cf:43:7a:27:35:58:32:26:ff:4f:
         96:d3:93:b7:0c:69:16:47:32:f0:7b:91:85:cb:3a:53:b9:66:
         17:b0:91:40:88:bd:0a:ed:5f:2f:ef:07:e2:cd:e7:91:9f:28:
         eb:98:ba:70:dc:41:07:b2:a7:53:d7:04:6d:cf:d5:73:75:73:
         f2:77:b4:c9:27:b9:78:fb:83:2e:7d:dc:04:3c:4c:c0:45:9a:
         c7:0e:ee:34:c0:8d:84:7c:9e:6d:e4:65:80:e6:1a:c8:f2:bd:
         95:d6:4d:a1:4d:c2:fe:5e:fc:9d:6b:54:75:b1:e1:b4:3d:d3:
         5f:0d:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:18:49 2025 by rpki-client